add optional nginx HTTP basic authentication